Free Scripts
PowerShell scripts, Intune remediations, and tools for Microsoft Intune, SCCM, and Defender admins. On GitHub, open, no sign-up.
Bulk-Add Devices to an Entra ID Group from a List of Names
Stop adding devices to a group one at a time. This PowerShell script adds a whole list of machine names to an Entra ID group and skips the ones already in it.
Read MoreBulk-Add Users to an Entra ID Group from a List of UPNs
Add forty users to a group in one run instead of forty searches. Resolves each UPN, skips existing members, and confirms before it writes anything.
Read MoreBulk-Edit Intune Assignments and Scope Tags Without Overwriting Anything
A WinForms wizard that adds or removes assignments and role scope tags across Win32 apps and configuration profiles additively, so existing targets survive.
Read MoreCollect the Mac Inventory Intune Does Not Give You
A custom inventory solution that gathers the extra hardware and software detail from Intune-managed Macs and makes it available for reporting.
Read MoreCollect the Windows Inventory Intune Does Not Give You
A custom inventory solution that collects the extra Windows device data Intune does not gather, the same feed that powers richer reporting in BI for Intune.
Read MoreFind Out What Intune Is Really Doing on a Device (Claude skill)
A Claude Code skill that reads the IME logs, registry, and local state on a managed Windows device and explains what Intune actually did. Trigger: go rudy this.
Read MoreFind Out Why Intune Graph Syncs Are Slow or Failing
Capture the throttling headers, status codes, timings, and error bodies behind a slow Intune sync so you can hand Microsoft Support something concrete.
Read MoreFind Secrets Hiding in Your Intune Scripts
Audit every Remediation and platform script in the tenant for embedded credentials, keys, and tokens. Findings are reported with the values redacted.
Read MoreForce-Install Edge and Chrome Extensions with Intune Without Wiping the List
Add or remove a required browser extension across the fleet while leaving the extensions already on the force-install list exactly where they are.
Read MoreKeep Intune Win32 Installs and Remediations Inside a Maintenance Window
Intune has no maintenance windows for Win32 apps or Remediations. This detection script adds one, so nothing installs in the middle of the workday.
Read MoreLimit, Schedule, and Retry Intune Win32 App Installs
PowerShell tools for the rough edges of Win32 deployment: install only on new devices, respect a maintenance window, and retry failed installs automatically.
Read MoreMake Sure Every BitLocker Recovery Key Is Backed Up to Entra ID
Find Intune-managed and workplace-joined devices whose BitLocker recovery key never escrowed, and force the backup before someone gets locked out.
Read MorePackage Any MSI for Intune Win32 Apps Without Editing a Script
Turn one MSI into tested install, detection, and uninstall scripts, the .intunewin, and an Intune info sheet from a single window. No script editing.
Read MoreQuery-Based Collections for Intune: Groups That Fill Themselves from Installed Software
Rebuild SCCM-style query-based collections in Intune with a Logic App and Azure Functions that keep Entra ID groups in sync with what devices have installed.
Read MoreRe-Run an Intune Win32 App on a Schedule Instead of Once
A registry-timestamp pattern that lets an Intune Win32 app re-execute on a cadence you control, for configuration payloads that need to reapply.
Read MoreRecover Intune Platform Script Content the Portal Will Not Show You
Once a platform script is uploaded, Intune will not let you view it. This script pulls the body back through Microsoft Graph and saves it as a .ps1 file.
Read MoreRetry Failed Intune Win32 App Installs Without Touching the Device
An Intune Remediation that clears the IME retry state in the registry, so a failed Win32 app install is attempted again on the next cycle.
Read MoreSearch Inside Every Intune Script in Your Tenant
Intune hides script bodies behind base64. This script decodes every Remediation and platform script and tells you which ones match a pattern you supply.
Read MoreSet Intune Device Categories Automatically from the Enrollment Profile
An Azure Automation runbook that assigns a Device Category from the Autopilot or Windows 365 profile, so new devices land in the right group with no manual tagging.
Read MoreUpgrade Windows 10 to Windows 11 In Place Through Intune
A PowerShell script that runs the in-place upgrade directly and handles the hardware-check and half-finished-upgrade failures that stall policy-driven updates.
Read MoreNo scripts match your search.